Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: hCXA43JC4Yw5IfAOJUBlzeEnjp0VK/M0J3k9hJSXr4o=
Subject key identifier: 42:0E:95:A1:AE:07:1E:2A:E5:C6:02:23:4B:51:D9:94:73:A5:7A:60
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019E8D5BFC7188453C914ECBBADBF4C8220D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 1944
Signing time: Wed 03 Jun 2026 12:01:16 +0000
Manifest this update: Wed 03 Jun 2026 12:01:16 +0000
Manifest next update: Thu 04 Jun 2026 12:01:16 +0000
Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: ddTiy6lxOZAI3QWN+fFzJX+F145+3SZBJr8v/cu4HL8=)
3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:fc:71:88:45:3c:91:4e:cb:ba:db:f4:c8:22:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jun 3 12:01:16 2026 GMT
Not After : Jun 4 12:01:16 2026 GMT
Subject: CN=420e95a1ae071e2ae5c602234b51d99473a57a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:5e:07:41:57:bd:8f:c9:a3:0f:01:0f:05:
df:d1:3f:61:30:07:ff:a5:eb:ba:c6:8e:b9:b8:b1:
e5:ec:8a:70:2d:1c:11:4f:68:ab:86:ba:10:2e:a6:
1b:26:f6:56:26:2f:3e:d1:02:64:de:5f:23:f1:61:
6e:3e:65:4c:84:fc:42:d1:5a:01:b1:9b:63:fc:9b:
3d:71:fa:3c:66:88:be:ad:a5:6d:f2:26:87:bd:f8:
20:66:7c:82:5f:ee:a1:c0:37:b6:d0:a6:7c:47:7b:
74:60:75:d1:01:eb:00:27:59:3c:d7:77:46:8c:dd:
a3:4d:59:1c:a7:61:22:67:b0:93:ff:4d:21:32:ea:
15:75:43:1f:db:66:1a:d3:d9:d2:45:0b:b4:11:a3:
0a:6f:4c:b1:b9:67:44:c3:72:57:56:2e:ce:a5:7e:
c1:23:f8:f2:8c:b3:ee:da:53:d6:be:1f:a7:41:cf:
a7:d6:45:e5:a1:bb:36:d9:6b:c8:64:f7:9b:13:73:
27:92:2a:b1:d9:b1:55:a6:d3:aa:a4:c1:42:a9:f5:
08:96:86:ba:b9:b7:7c:8b:0d:a7:13:53:a0:18:21:
b2:87:55:71:0b:9f:49:eb:fe:a0:04:f7:20:d9:8c:
d5:6d:51:ab:bd:2f:38:0f:cb:f8:06:c6:97:7a:be:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:95:A1:AE:07:1E:2A:E5:C6:02:23:4B:51:D9:94:73:A5:7A:60
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:63:37:9f:cb:8d:ed:25:bc:21:d7:ea:e0:8b:68:ae:f7:7e:
61:67:8c:f1:d3:1a:87:ac:ea:6b:0e:a8:a5:6f:70:20:3e:0a:
38:ad:5f:f7:a8:09:8a:4d:d3:ab:2f:1b:3e:35:5c:58:84:40:
b7:11:19:fb:22:06:6f:cf:5b:0f:15:6a:05:b9:55:4b:ab:22:
a4:2b:c5:b4:95:7d:b8:d0:58:b2:22:25:65:96:36:d2:33:ca:
d1:e6:30:4a:18:db:59:b7:17:db:5f:d3:83:89:0e:ac:fb:e7:
c5:cc:4d:77:0a:29:a0:35:5c:4a:e3:a9:64:4f:cc:17:31:72:
58:2d:fa:86:8f:77:e7:cc:9e:c8:14:25:5f:57:60:8c:90:77:
2e:15:2d:62:bd:ad:f8:de:13:d8:e3:9b:e0:58:fe:39:4c:c4:
84:36:ae:ae:c0:7a:d7:8c:7c:bf:e1:54:21:ab:94:42:a9:95:
e5:9a:b8:94:27:bb:99:4d:02:d7:1a:12:59:29:60:b9:e8:73:
36:89:db:4e:3c:5e:a9:45:61:9f:6d:8c:41:5d:55:a1:d8:6e:
30:60:25:a1:6b:41:e8:a3:73:31:bf:8a:55:df:e3:f6:56:22:
58:ab:a2:09:25:3c:5e:dd:b7:a8:8a:b0:a7:81:71:1e:22:35:
43:d3:1e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6NW/xxiEU8kU7Lutv0yCINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjYwNjAzMTIwMTE2WhcNMjYwNjA0MTIwMTE2WjAzMTEwLwYDVQQD
Eyg0MjBlOTVhMWFlMDcxZTJhZTVjNjAyMjM0YjUxZDk5NDczYTU3YTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOBeB0FXvY/Jow8BDwXf0T9hMAf/
peu6xo65uLHl7IpwLRwRT2irhroQLqYbJvZWJi8+0QJk3l8j8WFuPmVMhPxC0VoB
sZtj/Js9cfo8Zoi+raVt8iaHvfggZnyCX+6hwDe20KZ8R3t0YHXRAesAJ1k813dG
jN2jTVkcp2EiZ7CT/00hMuoVdUMf22Ya09nSRQu0EaMKb0yxuWdEw3JXVi7OpX7B
I/jyjLPu2lPWvh+nQc+n1kXlobs22WvIZPebE3Mnkiqx2bFVptOqpMFCqfUIloa6
ubd8iw2nE1OgGCGyh1VxC59J6/6gBPcg2YzVbVGrvS84D8v4BsaXer51cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIOlaGuBx4q5cYCI0tR2ZRzpXpgMB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2M3n8uN
7SW8Idfq4Itorvd+YWeM8dMah6zqaw6opW9wID4KOK1f96gJik3Tqy8bPjVcWIRA
txEZ+yIGb89bDxVqBblVS6sipCvFtJV9uNBYsiIlZZY20jPK0eYwShjbWbcX21/T
g4kOrPvnxcxNdwopoDVcSuOpZE/MFzFyWC36ho9358yeyBQlX1dgjJB3LhUtYr2t
+N4T2OOb4Fj+OUzEhDaursB614x8v+FUIauUQqmV5Zq4lCe7mU0C1xoSWSlguehz
NonbTjxeqUVhn22MQV1VodhuMGAloWtB6KNzMb+KVd/j9lYiWKuiCSU8Xt23qIqw
p4FxHiI1Q9MeYg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:50:19 2026 by rpki-client